Behavioral task
behavioral1
Sample
NEAS.e71ce4f0e460aeefe17553ddfefff8a0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e71ce4f0e460aeefe17553ddfefff8a0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e71ce4f0e460aeefe17553ddfefff8a0_JC.exe
-
Size
471KB
-
MD5
e71ce4f0e460aeefe17553ddfefff8a0
-
SHA1
0c4fdb0f9a639f6f1de1025f2a76a47c68b8b1d6
-
SHA256
2a46fd00ae24a729baf22afb3bbc4f75cee9137e60d3a854aa266fc9c044ced9
-
SHA512
caed4bcc574ee26fb0ebb27400e61e1d4637d33ba51d2c43ffc8b5cb3a697583b951d6e56292b5913e1cfbf102c065b5cef1d9e16291be8472904af35dcf2f51
-
SSDEEP
6144:KBlY+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4z2G2b2SG:KUnWwvHpVmXpjJIUd2cUusvalxzBY9G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e71ce4f0e460aeefe17553ddfefff8a0_JC.exe
Files
-
NEAS.e71ce4f0e460aeefe17553ddfefff8a0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE